Linux Kernel St_LSM6DSX IMU Device Lockup Vulnerability

CVE-2025-37970

What is CVE-2025-37970?

A vulnerability in the Linux kernel's st_lsm6dsx IMU driver can lead to an infinite loop scenario when the pattern length is set to zero while the device FIFO is not empty. This could cause significant delays or lockups, impacting system stability. The issue has been addressed to ensure that the function st_lsm6dsx_read_fifo operates as intended, preventing potential disruptions in critical applications dependent on this driver.

References